CVE Catalog
CVE-2026-16383
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.43%
36th percentile - higher than 36% of all known CVEs
Summary
A vulnerability in the DOM: Networking component in Firefox and Thunderbird allows bypassing security mitigations. This was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Risk Assessment
An attacker could exploit this vulnerability to bypass network security measures, potentially leading to unauthorized data access or man-in-the-middle attacks.
Recommendation
Update Firefox to version 153 or later, Firefox ESR to 140.13 or later, and Thunderbird to version 153 or 140.13 depending on the branch used.
Original NVD description (English source)
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.